Sophia by Shirley respects your privacy. This policy explains what personal information we collect, how we use it, and the choices you have. We handle personal data in line with Malaysia’s Personal Data Protection Act 2010 (PDPA).
Who we are
Your personal data is collected and controlled by Sophia by Shirley Enterprise (business registration no. 201603291930 (SA0398795-A)), Zenith Corporate Park, E-51-G, No. 1 Jalan SS7/26, 47301 Petaling Jaya, Selangor, Malaysia.
What we collect
- Your name and WhatsApp number, and your email address if you provide one.
- Delivery and contact details, and your order history, when you buy or enquire.
- Your marketing preference — only if you choose to hear from us.
- Basic, first-party usage information about how the site is used, to keep it working well. We do not use third-party advertising or tracking services.
How we use it
- To take, fulfil and deliver your orders, and to provide customer service.
- To respond to your enquiries and keep you updated on your order.
- With your consent, to give you first access to new pieces and the occasional offer. You can withdraw this consent at any time.
Consent & your choices
We only send you marketing messages if you’ve opted in. You can opt out or withdraw your consent whenever you like — just message us on WhatsApp and we’ll update your preference.
Who we share it with
We don’t sell your personal data. We share it only with the service providers we need to fulfil your order — such as our payment processor (Stripe) and delivery couriers — and only as far as needed to do so, or where the law requires it.
How long we keep it
We keep your information for as long as needed to provide your orders and meet our legal obligations, and for as long as you wish to hear from us.
Your rights
You can ask us to access, correct or delete your personal data, or to stop using it for marketing. To make a request, message us on WhatsApp and we’ll help.
Security
Your information is held on our own managed infrastructure and transmitted over an encrypted connection. Payment card details are handled directly by our payment processor and are never stored on our servers.
Cookies
We use only the cookies needed to run the site — for example, to keep your cart and session — together with first-party usage measurement. We don’t use third-party advertising cookies.
Contact
Questions about your privacy? Message us on WhatsApp — we’re happy to help.
Last updated: July 2026.
